IT & Security Manager
Description
IT & Security Manager
About us:
The physical and digital worlds are merging. Vehicles, medical devices, industrial systems, critical infrastructure: security hasn't kept pace. AI is accelerating everything, from the capabilities of the systems we depend on to the sophistication of the threats targeting them. A software vulnerability can now have physical consequences. A physical breach can compromise entire digital ecosystems. Billions of devices operate with little to no protection, and traditional approaches can't keep up. Not at this scale, not at this speed, and not across this diversity of systems.
Exein exists to solve this. We build the security layer for a world where physical and digital threats are no longer separate problems, from kernel-level runtime protection on embedded devices to cloud-native platforms that analyze, protect, and prove compliance across entire device fleets. We're not patching the old model. We're building security from the core out.
About the Role
We are looking for an IT & Security Manager to own our IT environment and help us build strong security and compliance foundations.
This is a hands-on, mid-level role at the intersection of IT operations and cybersecurity. Day to day, you will run and improve our Linux systems, manage our Google Workspace environment and our devices through MDM, and put in place the security controls, policies and processes that keep the company protected and audit-ready.
Compliance is a key part of the job. You will support audits and certification activities such as ISO 27001 and SOC 2, maintaining evidence, documentation and remediation plans, and handling security questionnaires from customers, partners and investors. A background in cybersecurity is strongly valued.
You will have real ownership from day one, direct access to leadership, and room to grow your scope as the company scales. If you are a sharp, curious IT or security professional with solid technical foundations and a practical, proactive attitude, we would love to hear from you.
What You Will Do
IT Operations
- Manage and improve our IT infrastructure, Linux systems and internal tools
- Administer Google Workspace, including identity, access and security settings
- Manage endpoints and devices through our MDM solution, including onboarding and offboarding
- Handle IT assets, licenses and SaaS subscriptions, and work with IT vendors
- Support backup and business continuity processes
Cybersecurity
- Implement and maintain security controls across systems, devices, applications and cloud
- Manage access control, authentication and the user lifecycle
- Monitor vulnerabilities and contribute to risk management
- Support security incident response
- Promote security awareness across the team
Compliance & Audits
- Maintain IT and security policies, procedures and documentation
- Collect evidence and support internal and external audits and certification activities (e.g. ISO 27001, SOC 2)
- Track remediation actions through to completion
- Support security questionnaires from customers, partners and investors
Requirements
- Past experience in IT operations, systems administration or information security, ideally in a startup or tech company
- Solid hands-on knowledge of Linux systems
- Hands-on experience with MDM solutions
- Experience administering Google Workspace
- Cybersecurity background (strongly preferred)
- Experience with compliance, audits or certifications, such as contributing to policies, evidence collection or audit activities
- Autonomous and proactive, with good problem-solving skills
- Clear communication with both technical and non-technical colleagues
- Fluent English, written and spoken
Nice to Have
- Experience with cloud platforms (AWS, Azure, Google Cloud)
- Exposure to ISO 27001, SOC 2, NIST or CIS, or certifications such as ISO 27001 Lead Implementer or Security+
- Familiarity with GDPR
- Previous experience in a startup or scale-up or in a Cybersecurity environment
Location: Roma, Hybrid (3 days a week) - Piazzale Flaminio 19, 00196
Range: 55K-65K
Exein is committed to creating an inclusive workplace. We evaluate all applications fairly regardless of gender, age, ethnicity, background, or orientation.
Skills
As published by greenhouse · 10 questions · 2 written answers
Basics
First Name, Last Name, Preferred First Name, Email, Phone, Resume/CV, Cover Letter, Location
Pick from a list (8)
- Are you english fluent?
- Do you have at least 3 years of experience as an IT Manager?
- Are you available to work 3 days in the office in our HQ in Rome?
- Do you have at least 3 years of experience with Linux OS?
- The personal data provided as part of your application, including the information contained in your resume/CV and any additional documentation submitted, will be processed by Exein S.p.A. solely for purposes related to recruitment, candidate selection, and the assessment of professional qualifications. Such activities may include, by way of example, the evaluation of skills, qualifications, and professional experience, the organization of interviews, the assessment of suitability for open positions, and the management of communications related to the recruitment process. Your personal data will be accessed only by authorized personnel within the Human Resources function and, where necessary, by managers and personnel involved in the evaluation of applications. To support the recruitment process, Exein S.p.A. may engage specialized third-party service providers, including providers of digital recruiting and applicant tracking platforms, acting as data processors and subject to appropriate confidentiality and security obligations. Exein S.p.A. implements appropriate technical and organizational measures to ensure the security of personal data and to protect it against unauthorized access, loss, disclosure, alteration, or accidental destruction. Personal data will be retained for as long as necessary to manage the recruitment process and may be kept for a limited period thereafter in order to consider candidates for future employment opportunities that may be relevant to their profile, unless otherwise requested by the candidate.
- Do you have experience with security/compliance frameworks such as ISO 27001, SOC 2, NIST or CIS Controls?
- Do you have experience with MDMs?
- Do you have experience with Google Workspace?
Written answers (2)
- LinkedIn Profile
- What's your expected annual gross salary or salary range?